Privacy Policy

1. Introduction

Bridgeway Finance (ABN 29 441 437 265) is a mortgage lead referral service based in Perth, Western Australia. We are committed to protecting the privacy of everyone who interacts with our website and services — including borrowers who submit enquiries and licensed mortgage brokers who subscribe to our platform.

This Privacy Policy explains how we collect, use, store, and disclose personal information. It is written in plain English and complies with the Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

By submitting an enquiry on our website, calling us, or entering into a broker agreement with us, you consent to the collection and handling of your personal information as described in this policy.

2. Who We Are

Bridgeway Finance operates as a marketing and referral service. We generate enquiries from home buyers and investors, verify those enquiries by phone, and deliver them exclusively to licensed Western Australian mortgage brokers. We do not provide credit advice, recommend specific lenders or products, or assist borrowers in applying for credit.

Our contact details are: email admin@bridgewayfinance.com.au, phone 0452 100 220, website bridgewayfinance.com.au, address Perth, Western Australia.

3. What Personal Information We Collect

3.1 From Borrowers

When you submit an enquiry through our website or landing pages, we collect:

• Full name
• Mobile phone number
• Email address
• Postcode
• Loan purpose (e.g. first home buyer, refinance, investment, construction)
• Estimated loan amount
• Employment status
• Self-reported credit history
• Timeframe to proceed
• Any additional information you provide during our phone verification call
• IP address and browser or device information (collected automatically)

3.2 From Mortgage Brokers

When a mortgage broker subscribes to our platform, we collect:

• Full name and business name
• Email address and phone number
• Business address
• ABN and Australian Credit Licence number
• Payment information (processed via Stripe — we do not store card details directly)
• Signed contract data (via Docusign)
• Portal login activity and lead interaction history

3.3 Automatically Collected Information

When you visit our website, we automatically collect certain technical information including your IP address, browser type, operating system, pages visited, time spent on pages, and referring URLs. This information is collected via cookies and analytics tools described in Section 9.

4. How We Collect Personal Information

We collect personal information through the following channels:

• Online enquiry forms embedded on bridgewayfinance.com.au and our dedicated landing pages (built via Webflow and Fillout)
• Phone calls — our team calls you to verify your enquiry details
• Email correspondence with borrowers and brokers
• The broker subscription process — via Docusign (contract signing) and Stripe (payment processing)
• Automated systems — including our CRM (Airtable), automation platform (Make), and broker portal (Softr)
• Third-party advertising platforms — Meta Ads and Google Ads, which may collect data about your interaction with our advertisements

5. Why We Collect Personal Information

We collect personal information for the following purposes:

• To verify your identity and the details of your home loan enquiry
• To match you with an appropriate licensed mortgage broker
• To contact you by phone and email as part of our verification and referral process
• To deliver your verified enquiry to a single licensed broker on your behalf
• To manage broker subscriptions, contracts, and payments
• To improve our advertising targeting and reduce wasted ad spend
• To generate AI-assisted summaries of verified enquiries for delivery to brokers (using the Anthropic Claude API)
• To comply with our legal obligations
• To respond to enquiries, feedback, and complaints

We will only use your personal information for the purposes for which it was collected, or for directly related purposes that you would reasonably expect.

6. Who We Disclose Your Information To

6.1 Mortgage Brokers

Your verified enquiry — including your name, phone number, email address, loan details, and an AI-generated summary — is delivered exclusively to one licensed WA mortgage broker. We do not share your enquiry with multiple brokers simultaneously.

6.2 Technology Service Providers

To operate our business, we use technology platforms that may process your personal information on our behalf:

Where data is transferred overseas, we take reasonable steps to ensure it receives comparable protections to those under the Australian Privacy Act.

6.3 What We Never Do

6.4 Legal Disclosures

We may disclose personal information if required to do so by law, in connection with legal proceedings, or to protect the rights, property, or safety of Bridgeway Finance, our clients, or the public.

7. How We Store and Protect Your Information

Your personal information is stored in Airtable, a cloud-based CRM platform with enterprise-grade security. Access to your information is restricted to authorised Bridgeway Finance personnel only.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These steps include password protection, role-based access controls, and encrypted data transmission (HTTPS).

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you believe your information has been compromised, please contact us immediately.

8. Data Retention

• Active leads (verified and/or assigned to a broker): retained for 7 years from the date of enquiry, in line with standard financial services record-keeping obligations
• Inactive leads (unable to contact or did not proceed): archived after 12 months and permanently deleted after 7 years
• Broker records: retained for the duration of the broker relationship and for 7 years after the relationship ends
• Website analytics data: retained in accordance with Google Analytics and Meta's standard data retention policies

When personal information is no longer required and retention is not mandated by law, we will take reasonable steps to destroy or de-identify it.

9. Cookies and Analytics

Our website uses cookies and tracking technologies to improve your experience and to support our advertising activities.

9.1 Google Analytics

We use Google Analytics to understand how visitors use our website. This data is aggregated and does not identify you personally. You can opt out by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

9.2 Google Ads Conversion Tracking

We use the Google Ads conversion tracking tag (AW-18071204977) to measure when a visitor submits an enquiry after clicking one of our Google ads. This helps us understand which keywords and ads generate enquiries.

9.3 Meta Pixel

We use the Meta Pixel to track interactions with our website from Meta advertising campaigns, build retargeting audiences, and measure the effectiveness of our Facebook and Instagram ads. Meta may use this data in accordance with its own privacy policy at facebook.com/privacy/policy.

9.4 Managing Cookies

Most browsers allow you to control cookies through their settings. Disabling cookies may affect the functionality of our website. For more information visit allaboutcookies.org.

10. Accessing and Correcting Your Information

You have the right to request access to the personal information we hold about you, and to request that we correct any information that is inaccurate, outdated, or incomplete.

To make an access or correction request, please contact us using the details in Section 14. We will respond within 30 days. In some circumstances we may be unable to provide access — for example where providing access would reveal information about another individual, or where we are required by law to refuse. If we refuse access we will tell you why in writing.

We do not charge a fee to make an access or correction request, but we may charge a reasonable fee to cover our costs in providing access to a large volume of information.

11. Privacy Complaints

If you believe we have breached your privacy rights or the Australian Privacy Principles, you have the right to make a complaint. Please contact us first using the details in Section 14 — we will acknowledge your complaint within 5 business days and attempt to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

12. Notifiable Data Breaches

Under the Notifiable Data Breaches (NDB) scheme, we are required to notify affected individuals and the OAIC if we become aware of an eligible data breach — that is, where unauthorised access to, disclosure of, or loss of personal information is likely to result in serious harm.

In the event of an eligible data breach, we will notify affected individuals as soon as practicable and will include details of the breach and recommendations to minimise the risk of harm.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of our website or services after any update constitutes acceptance of the revised policy.

14. Contact Us

For any privacy-related enquiries, access requests, correction requests, or complaints, please contact us: